Questions regarding password-based authentication and password management

learn more… | top users | synonyms

3
votes
1answer
291 views

Is it a good idea to use pwsafe - a password manager not updated since 2005?

I'm looking for a command-line Linux password-manager. It appears that pwsafe is the program most commonly used. However, its latest update was in 2005. Is it a good idea to use this? Has it been so ...
3
votes
1answer
565 views

Can pwgen output passwords of a certain length?

I'm using the command line tool pwgen to generate passwords because I love the repeatability you get with the sha1 command line flag. To quote the man page: -H, --sha1=/path/to/file[#seed] ...
3
votes
1answer
792 views

Debian Log In Failure With Correct Password

So I have a Debian distro at home (considering getting ubuntu), and I can't login. When I use the correct password is does this thing where it makes it look like it's going to login, and then it ...
3
votes
1answer
2k views

How to reset KDE wallet password in linux?

I have installed OpenSUSE on my laptop. I am trying to connect to my wifi. I entered my wifi password (correctly) and then it is asking for my KDE wallet password. I set the KDE password but forgot ...
3
votes
2answers
217 views

Is it possible (and a good idea) to do `pw lock root` on FreeBSD?

I have set up sudo on my FreeBSD server. As I now never want to log in as root anymore, I was wondering whether I should do sudo pw lock root. My questions are: Is this possible, without forever ...
3
votes
1answer
623 views

Debian wake up from suspend password

I am using Debian Squeeze. When I suspend my laptop and wake it up again later, it doesn't ask for the system password. How do I fix this?
3
votes
1answer
83 views

Solaris/OpenIndiana: Password for roles?

I've been gently experimenting with roles in Solaris, and wonder a bit about setting a password for it. I want the role I've created to be used by several users, so setting password to the same as ...
3
votes
1answer
231 views

Is it a bad idea to add myself to the sudo group?

Members of the sudo group in my Debian install can execute anything without entering a password. This is convenient, but seems like a bad idea. NOTE: My computer is an ordinary desktop, not a server ...
3
votes
1answer
214 views

Can linux use a mix of SHA-1 and CRYPT passwords?

We have an automated sync-routine that uses useradd to create new users on a Ubuntu 10.04 machine. The application launching the routine provided both username and CRYPT-encrypted password. However, ...
3
votes
1answer
1k views

Can I automate mounting a cifs share without storing my password in plaintext?

I currently use a script which contains commands along the lines of sudo /sbin/mount.cifs $SERVER_SHARE $MOUNT -o username=$DOMAIN_$USER,uid=$USER,gid=$USER,file_mode=0664,dir_mode=0775 to mount my ...
3
votes
2answers
5k views

Will a users password expire if I set the “maxexpired” to “-1”? [maxage not 0] - AIX

So under AIX 6, according to "lsuser" the user has the following settings: maxexpired=-1 maxage=2 So this means that 2 weeks after the last password update of the user the password will expire, but ...
3
votes
1answer
789 views

Why does a user get prompted for password under AIX?

Users get prompted for password, and according to the lsuser -f username output: expires=0 maxexpired=-1 maxage=13 users shouldn't be prompted for changing password. Why does he has a change ...
3
votes
1answer
655 views

Change default for Nautilus (file_manager) from “Forget password immediately”?

When opening a tab which needs to mount a Samba share, Nautilus 2.30.1 displays a window: Password required for share xxx on localhost Password: [ ] (*) Forget password immediately ( ) ...
3
votes
1answer
820 views

Graphically ask for password in a bash script and retain default sudo timeout setting

The sudo -A (SUDO_ASKPASS) option apparently causes sudo to lose the timeout (e.g., timestamp_timeout) setting. I want to use the sudo -A option but I want to retain the default timeout (e.g., 15 ...
3
votes
2answers
3k views

Change Password of a user in /etc/shadow

I would like to change the password of a user in the /etc/shadow. I can't use password changing programs like passwd. It must be done by editing the /etc/shadow. The /etc/shadow is on a mounted hard ...
3
votes
0answers
95 views

Restrict usage of the same password during a time period

I need to configure a server with some requisites on the password changing: in addition to other requisites, I need to ensure that, on a password change, it is not repeated (last 5 passwords) and ...
3
votes
1answer
625 views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
3
votes
3answers
2k views

Another account with same uid as root gets prompted to set new password for root, not itself

After upgrading the os from 5300-06 to 5300-11, this weird behaviour happened. My system had another unix account, let's call it "abc", purposely configured its uid to 0 for working as a root with ...
3
votes
0answers
404 views

ZIP password finders for Linux?

I'm trying to extract ZIP files for an encrypted archive I've forgotten the password for. So far I've found the tool fcrackzip which does what I want, but its own manpage states that it has numerous ...
3
votes
3answers
1k views

Logged on via ssh-key, can I reset my account password?

I am logged in on a server via sshkey (ssh -i /home/me/.ssh/ssh-key me@server). I got sudo rights on that server from the admin, but I can't exercise them, since I forgot my actual Unix password (or ...
2
votes
8answers
2k views

How to give a normal user permission to change root password

Please do not ask why, but is it possible to do it? p/s: I know it's not a good thing, let's just say someone from the top management who is computer illiterate want some sort of control over the ...
2
votes
2answers
1k views

How to get hashed password in /etc/shadow using getpwnam()?

Apparently there is a function (getpwnam) that given a username, will return the appropriate entry in /etc/passwd with the other details for that user (shell, uid, gid, etc.). However, I have no idea ...
2
votes
4answers
994 views

Can separate unix accounts share a username but have separate passwords?

On unix systems, each separate user account has a unique username. Passwords, then, are not unique - every distinct user could have the same exact password. I want to do the converse. I want one ...
2
votes
3answers
100 views

Do all Linux distro's use the same cryptographic hash function?

Do all Linux distro's use same Cryptographic hash function? If yes, is it provided with the kernel itself? EDIT:- I refer to the function mainly used for storing user login passwords.
2
votes
3answers
194 views

What command should I run after making changes to /etc/passwd file

I have made some changes to /etc/passwd file ,now I wanted to see if the effect of changes taken place or not .What command should I run for that. For example after making change to ...
2
votes
1answer
272 views

Setting the root password vs. sudo -i

Should one always set a root password, or is sudo -i acceptable? Two problems is in reading other posts (maybe junk I realize): sudo -i eliminates the need for a password. Isn't that a problem for ...
2
votes
4answers
2k views

Change password in headless mode

I am building a script to fully automate a VPS setup, and I need to change the root password. I would like to avoid typing it as the script is running through SSH. Is there a way to redirect an ...
2
votes
1answer
747 views

Does OpenBSD use bcrypt by default?

http://codahale.com/how-to-safely-store-a-password/ with what does OpenBSD store the password by default? They say bcrypt is way more secure then hashing. I googled' it and obsd supports bcrypt, but ...
2
votes
3answers
170 views

What happens if I delete all user passwords?

I have a Fedora VPS with a root user that has no password. I login with SSH keys. I had another, less privileged account on that server, used for web administration. I've now deleted its password ...
2
votes
2answers
294 views

Finding root password

I installed a Ubuntu and it only has a user. I can login to the system without login. It doesn't ask me for un/pwd. but when I am in, and I want to run some commands as root (sudo), it ask for ...
2
votes
2answers
5k views

How to remove root password on Debian?

I'm running Debian in a virtual machine and for convenience I would like to remove the password on root (since it doesn't really matter what happens to this box). Internet hasn't been too helpful on ...
2
votes
2answers
2k views

Ubuntu password policy

I want to set the system-wide password policy on an Ubuntu 12.04 LTS server. Googling around, a lot of people point to this (very old) document: ...
2
votes
4answers
568 views

sudo without password - security? [duplicate]

Possible Duplicate: What specific vulnerabilities am I creating by disabling the sudo password? I'm involved yet again in the old argument on whether sudo without password is secure enough ...
2
votes
1answer
447 views

retrieve password on remote server

I normally ssh into a remote server, for which I previously set an option that allows me not to type my password every time. Now that I forgot it, is there any way to retrieve it?
2
votes
2answers
82 views

change regular user's password with root access

I have Ubuntu installed on a Raspberry pi. I have a normal user pi, but I forgot the password. However, I do have root access. How would I change pi's password using root?
2
votes
2answers
298 views

Using for loop to brute-force a password

I just wanted to brute-force my old router but the for-loop was really amateur style. How to write a nice for-loop, if I only know the charaters included? Found already that page but it does not ...
2
votes
1answer
178 views

How to change the forgotten root password?

I am very new to Debian linux, I forgot my root password...actually I think I know what it is because it is the same password I have for pretty much everything but in the Terminal in tell me "Sorry, ...
2
votes
1answer
417 views

Apache boot without asking for passwd

So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
2
votes
1answer
137 views

Where can I find a reference to the format of the comment field (field 5) of the /etc/passwd file?

In the /etc/passwd file on my system, the "comment" field, field 5, is inconsistent in its contents. I thought that I could extract it to get the full name of the user. fullname=`awk -F: '$1 == name ...
2
votes
3answers
2k views

debian not accepting administrative password

I have XFCE Debian on an old PowerPC PowerBook G4. When I go to open Synaptic Package Manager, a window pops up asking for my administrative password. I enter the password I normally use for sudo in ...
2
votes
1answer
349 views

A local, centralized, secure way to store FTP login data, including passwords

I want to be able to store the login details all of my remote FTP accounts in one place, securely. Then I'd like clients like autofs/curlftpfs, Filezilla, etc to use this one store of passwords. I'm ...
2
votes
3answers
59 views

proper configuration of visudo NOPASSWD for bash backup script

The abstract question is: If script x calls program y, do I need a NOPASSWD entry in /etc/sudoers for x, y or both x & y? (And can x then call sudo -v without a password?) Details: I'm trying ...
2
votes
2answers
456 views

rsync without prompt for password

I need to execute rsync, without it prompting me for password. I've seen in rsync manpage that it doesn't allow specifying the password as command line argument. But I noticed that it allows ...
2
votes
2answers
90 views

How does a BIOS password work?

I have created a BIOS password. I use the Dvorak keyboard layout. When I switch my keyboard layout to Qwerty and restart, and then type password in with the different layout, there is no change. ...
2
votes
1answer
508 views

Unix last password change date

My understanding is that the last change date(in /etc/shadow) is the number of days since 01/01/1970 that the password was changed, but I'm seeing numbers like 19708 which translate to 17/12/2023 ...
2
votes
2answers
157 views

Equivalent of “passwd -sa” in RHEL?

I feel a little silly having to ask this, but: In Solaris you can issue a passwd -sa command which gives you (more or less) the same output as passwd -S userName does, except it prints out the status ...
2
votes
1answer
399 views

wpa_supplicant store password as hash (WPA-EAP with phase2=“auth=PAP”)

Is there a way to store my password in /etc/wpa_supplicant/wpa_supplicant.conf as some hash instead of plaintext? By "password" I refer here to the password used for phase2 authentification. I do not ...
2
votes
1answer
97 views

How may I distinguish encryption algorithm of htpasswd?

I have an apache web server running on Debian Linux and I secure a certain directory with htaccess. I have no history or knowledge how the .htpasswd file was created. Apache documentations says that ...
2
votes
2answers
2k views

Avoid “Authentication token manipulation error” on password change

I'm implementing a security policy that will force the users to introduce stricter passwords when they change their own: The /etc/pam.d/passwd configuration file is: #%PAM-1.0 auth include ...
2
votes
1answer
6k views

How to lock users after 5 unsuccessful login tries?

How to lock users after 5 unsuccessful login tries? I gathered a few distributions/versions to how to do it, but I can't test it. RHEL4: by adding the: auth required ...